public IHttpActionResult Login(PasswordRequest req)
{
var userService = new UserService();
var sessionKey = userService.Login(req.DeviceId, req.Password);
if (sessionKey != null)
{
return Ok(sessionKey);
}
return Unauthorized();
}
